Secure Locomotive to Locomotive PTC Communication

Abstract

A system and method for a secure key exchange between two trains operating within a track network may include generating a first or second public key based on a secret random number, generating a shared secret key based on the first or second public key, authenticating one or more key exchange communications by a remote server based on a digital signature established with an on-board key associated with the first train, authenticating a communication by a remote server based on the digital signature of the second train signed with an on-board key associated with the second train, and establishing secure train-to-train communication between the two trains by generating a shared secret key based on a public key received from the other train, the secure key exchange protecting the two trains from a man-in-the-middle attack.

Description

BACKGROUNDField of the Invention[0001]The present invention relates generally to systems and methods of secure key exchange between two locomotives operating within a track network, and in particular, to providing secure key exchange for communications used in establishing a local communication link between two trains within the track network.Description of Related Art[0002]At any given time within a complex track network, one or more trains may be operating and traversing a route in the track network and sending data from one to another using various radio-based methods. For example, a moving block is a signaling block system where blocks are defined in real time by computers to establish safe zones around a first train (e.g., a lead train, etc.) and a second train (e.g., a follower train, etc.). Further, the one or more trains may have on-board communication and control systems that facilitate the safe operation of the one or more trains in a local territory within the network. Fo...

AI Technical Summary

Benefits of technology

The patent text describes a system for secure communication between train cars using a shared secret key. The system includes a central office server and two communication devices on each train car. The method involves generating a secret random number and a public key based on the train cars' identifiers, authenticating the public key based on a private key associated with the train car, and generating a shared secret key based on the two public keys. The system can prevent man-in-the-middle attacks and secure communication between train cars.

Problems solved by technology

The use of such communications as part of a train control system may introduce cyber security issues.

In this attack, public keys, two-factor authentication mechanisms, mutual authentication, digital signatures, etc., are insufficient to certify that the source of the message is the trusted second train, and the first train may not have, nor obtain, information to determine that the message was sent from the second train instead of a nefarious actor.

Images